Add support for multi-master FreeIPA replicas.

This patch lands the first part of the multi-master replica code.

NOTE: unfortunately, at this time the "secure secrets management" [1]
does not work in conjunction with this multi-master replicas patch.

[1]
https://ttboj.wordpress.com/2014/06/06/securely-managing-secrets-for-freeipa-with-puppet/
Add puppet-ssh submodule for ease of use with vagrant.
Add VRRP magic and VIP integration to vagrant.
Include the admin password so that the connection check succeeds.
Add sorted uuidgen -t based ordering for joined fqdn's.

This ensures that if new peers join the cluster after an initial built,
then then ordered list doesn't flip-flop. That is, they should always
get appended to the end of the list. Keep in mind that what the peering
algorithm does with them after that is a different issue.

Thanks to Pádraig Brady for giving me a sorted uuidgen -t algorithm.
Add a few small snippets for readability and correctness.